Re: Is this expected reject behavior for foreign IP connect attempt?

3 msg	Re: Virtual domain aliases
4 msg	address verify vs. virtual_alias_maps
20 msg	Postfix/ClamAV Config Error
4 msg	smtp /dev/poll problem
6 msg	Addresses filtering for only one supported domain
14 msg	Greylist question
1 msg	One transport with AUTH and other transport wit...

Is this expected reject behavior for foreign IP...
\ Charles Marcus (28 Nov 2007)
. \ Michael Tokarev (28 Nov 2007)
. . \ Charles Marcus (28 Nov 2007)
. . . \ mouss (28 Nov 2007)
. . . . \ Charles Marcus (28 Nov 2007)
. . . . . \ mouss (28 Nov 2007)
. . . . . . \ Charles Marcus (28 Nov 2007)

3 msg	relay_domains and virtual_mailbox_domains not w...
2 msg	Need help debugging a possible content filter p...
11 msg	spam emails with \| in front of the email addresses
9 msg	unexpected domain rewrite (by postfix?)
5 msg	Error receiving email
20 msg	Postfix 2.5-20071111, smtp.gmail.com, bouncing ...
1 msg	Bounce notification configure
45 msg	Re: Recipient validation
2 msg	Use of MySQL for lookups
8 msg	proposal: change behavior with respect to recip...
11 msg	OT: Any bad DKIM experiences?
8 msg	hashed spool directories

Subject:	Re: Is this expected reject behavior for foreign IP connect attempt?
Group:	Postfix-users
From:	Charles Marcus
Date:	28 Nov 2007

On 11/28/2007, mouss (mlist.only) wrote:
>> I know, but iptables rules are a bit on the greek side to me... ;)

> you mean it's horrible ;-P
>
> your rules should look more or less like:
>
> ... -i lo -j ACCEPT
> ... -s 208.65.144.0/21 -p tcp --dport 25 -j ACCEPT
> ... -p tcp --dport 25 -j REJECT --reject-with tcp-reset

yuck - we're both right - horrible greek... LOL

thanks again...

--

Best regards,

Charles